CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through <= 5.6.2.
Explanation of Vulnerability in Simple Terms
The Plus Addons for Elementor Page Builder Lite versions up to 5.6.2 lack proper authorization checks on certain functions. A logged-in user with low privileges can read sensitive data they should not have access to. The vulnerability does not allow data modification or site unavailability. Update to a version newer than 5.6.2.
What an attacker can do
Read sensitive data they should not have access to as a low-privilege user.
Potential impact on your site
Unauthorized users can access confidential information stored in the plugin, such as private settings or user data.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
